11-18-2012 10:17 PM
hi, All
I have such a question.
we have a windows NBU backup environment 6.5.6, it;s very old.
we used the "Netbackup administration console"(the icon below) to do the adminitrative job. no need to input username/password every time.
actually I don't like the user interface. So when I upgraded the NBU from 6.5.6 to 7.5.0.3, I installed "Netbackup administration console" 7.5.
It looks like below. but I came accross login issue which not happened in other NBU backup environments.
it always shows as below. All of my NBU services are running with this domain account. We only have 2 Windows NBU backup domains.
it is good in the other one but doesn't work for this one.
I even created a file "C:\Program Files\Veritas\Java\auth.conf", which looks like beow, but still doesn;t work...
STARCITE\srv-backup ADMIN=ALL JBP=ALL
so who please help me correct this issue?
Solved! Go to Solution.
11-19-2012 01:40 AM
Both the account are in different domain as you see from your command
the account that is working is from domain starcite.com and is a domain admin
whereas the other one is from domain active.local and only a domain user.
You are trying to run the NBU console from a different domain all together, make sure you have craoss domain site relationship setup. Better you check with your Admin.
11-18-2012 11:33 PM
hi,
are you able to login (Remote desktop connection )to the Window server using the user name STARCITE\srv-backup.
if not(Not able to RDC)
you need to fix the issue first , why you are not able to login using RDC.
if yes, (able to RDC)
try adding the entry in auth.conf as below and try to login
srv-backup ADMIN=ALL JBP=ALL
and also in Java console use the user name as srv-backup,
i guess you are opening the java console from the master server it self..
11-18-2012 11:42 PM
hi, Nagalla
1) yes, I can log the windows NBU master via STARCITE\srv-backup
2) I am trying as your suggestion now
11-18-2012 11:47 PM
hi, Nagalla
I tried but seems not work......
I have another windows backup domain, I also open java console from the master server itself, but i used "STARCITE\srv-backup" as usename and I didn't create auth.conf....but it works.....
I even refer to http://www.symantec.com/business/support/index?page=content&id=TECH72342 but doesn;t work either
11-18-2012 11:57 PM
You have installed the Java Console instead of the Windows Admin Console. You were using Windows Admin Console before.
The Java Console needs an auth.conf file on the master that assigns rights to the users specified in this file.
See this TN for HOWTO create/modify auth.conf: http://www.symantec.com/docs/HOWTO34639
11-19-2012 12:18 AM
yes, Marianne, they are different console. Thank you for pointing out this.
1) I created auth.conf under but doesn't work
STARCITE\srv-backup ADMIN=ALL JBP=ALL
2) we have another windows backup domain in San Jose city. I did the same operation last week*(upgrade from 6.5.X to 7.5.0.3, install java console to replace windows admin console......). I installed java console and connect with "STARCITE\srv-backup" directly without creating auth.conf...............
11-19-2012 01:05 AM
hi Yang
if that did not help, lets isolate if that is the issue with the user account or netbackup
try to login with the local Administrator accout, to the Java console and see how it works.
if that works its confirms that is not a netbackup issue
may be we need to look in deep about login using domain account..
11-19-2012 01:06 AM
the domain account " srv-backup" has different settings on the two severs....
it has more permission on San jose NBU master. I think that is why I can connect with NBU directly via java console without creating auth.conf....
C:\Documents and Settings\srv-backup>hostname
sjcnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /DOMAIN
The request will be processed at a domain controller for domain starcite.com.
User name srv-backup
Full Name srv-backup
Comment login servers to back them up
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never
Password last set 10/25/2010 6:47 AM
Password expires Never
Password changeable 10/26/2010 6:47 AM
Password required Yes
User may change password Yes
Workstations allowed All
Logon script
User profile
Home directory
Last logon 11/19/2012 12:33 AM
Logon hours allowed All
Local Group Memberships
Global Group memberships *Exchange Organization*Exchange Domain Serve
*Server_Service_Accts *Domain Users
*Domain Admins
The command completed successfully.
C:\Documents and Settings\srv-backup>hostname
phlnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /domain
The request will be processed at a domain controller for domain active.local.
User name srv-backup
Full Name srv-backup
Comment
User's comment
Country code 000 (System Default)
Account active No
Account expires Never
Password last set 3/28/2012 4:36 PM
Password expires Never
Password changeable 3/29/2012 4:36 PM
Password required Yes
User may change password Yes
Workstations allowed All
Logon script
User profile
Home directory
Last logon Never
Logon hours allowed All
Local Group Memberships
Global Group memberships *Domain Users
The command completed successfully.
11-19-2012 01:24 AM
unfortunately srv-backup is the only acccount I have.........
11-19-2012 01:29 AM
yes, it seems
its missing Global Group memberships for *Server_Service_Accts *Domain Admins
i believe those are the things you require..
11-19-2012 01:40 AM
Both the account are in different domain as you see from your command
the account that is working is from domain starcite.com and is a domain admin
whereas the other one is from domain active.local and only a domain user.
You are trying to run the NBU console from a different domain all together, make sure you have craoss domain site relationship setup. Better you check with your Admin.
11-19-2012 05:37 PM
Thanks for all of you.
I at least understand why....
I will talk to domain admin.
11-19-2012 06:19 PM
but I still have a question, the account "srv-backup" is only a domain user,not domain admin in active.local domain.
so I am wondering if "domain admin" role is a MUST even if I configure auth.conf?
I am not sure if it is a MUST to make "srv-backup" a domain admin......
11-19-2012 08:35 PM
No need for domain admin rights - just local admin rights on master server.
11-20-2012 07:00 PM
HI, Marianne
Thank you . It helps me a lot.
Since our Windows master belongs to ACTIVE domain, so I asked domain administrator help create a ACTIVE domain user account for me.
1) the NBU services are running with ACTIVE domain user account "svc.scbackup"
2) The NBU master itself belongs to ACTIVE domain also
3) I add "srv-backup" to the local administrators......
I can access my Data domain CIFS share from NBU master, but I don't have write permission.....all the backups ended with status code 84.
here is my DD setting. May be I need to seek help from EMC forum for the DD configuration
sysadmin@shadd1# cifs share show
Shares information for: all shares
--------------- share backup ---------------
clients: 10.136.2.23
clients: 10.200.20.66
clients: 10.200.20.67
comment: This share can be accessed by Shanghai NBU master.
enabled: 1
path: /backup
users: ACTIVE\svc.scbackup
writeable: yes
11-20-2012 07:35 PM
Your question in this discussion was about Java Console Login.
If this problem is resolved, please select the post that has helped you most and Mark As Solution.
DD permissions will probably be best addressed in EMC forum. I found this post there:
https://community.emc.com/docs/DOC-11923
11-20-2012 08:51 PM
Thank you Marianne
02-12-2018 12:56 AM
This helps me a lot. Thanks for it.